Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File: 0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier: tfuGFhr+YviBIVQ/bPVKqnC2f2d+n/2+JRG3DgV4yEs=
Subject key identifier: 07:21:47:33:57:98:84:D4:A1:30:8B:49:A2:CC:A0:DE:0B:CB:F5:7A
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer: /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial: 019924445009DE2936A14CE002909DB33A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number: 1188
Signing time: Sun 07 Sep 2025 13:01:20 +0000
Manifest this update: Sun 07 Sep 2025 13:01:20 +0000
Manifest next update: Mon 08 Sep 2025 13:01:20 +0000
Files and hashes: 1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: Qu1F0R/7f5Zk6w0QHLcLa0gRIcvF5HMXLTDEPmIwQjg=)
2: jM6ObOeKnGJ-XMKGH2l4W5ZCd2A.roa (hash: KTQ2TAHXzAzojs4IsYPpcpBSdUKcZYE1gqliIFvrHcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:50:09:de:29:36:a1:4c:e0:02:90:9d:b3:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Validity
Not Before: Sep 7 13:01:20 2025 GMT
Not After : Sep 8 13:01:20 2025 GMT
Subject: CN=07214733579884d4a1308b49a2cca0de0bcbf57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:97:67:cb:31:02:c2:c4:d4:d7:63:ba:ef:
b4:bb:14:56:a6:d9:75:72:69:d9:c8:d7:d3:7a:cb:
14:15:4c:a8:be:dc:df:ca:ed:70:17:11:ce:45:03:
4f:52:1d:87:47:0e:66:d8:c7:c0:40:a6:55:61:7e:
d8:51:76:6f:6b:11:de:f5:f7:f9:90:17:09:11:1f:
eb:f7:41:04:8f:41:2e:00:0e:6f:e3:06:1f:e7:d4:
57:15:f3:27:e9:76:a4:01:ea:31:31:1f:e3:ca:38:
ff:d2:cd:8a:68:a4:2d:6d:7e:12:5d:c0:25:96:75:
f0:60:99:31:fa:3d:8b:24:ac:c0:69:cd:5d:b9:4c:
9c:d5:eb:6d:33:cd:45:fb:7c:8f:be:14:c0:a9:26:
2e:4d:79:41:29:55:80:eb:a6:76:65:f7:fc:eb:a1:
57:2d:19:e6:0f:fb:4e:42:23:ed:12:6c:97:49:5b:
3b:3f:ed:36:37:96:9a:99:74:dc:ab:e3:04:aa:28:
22:8c:49:4b:ba:12:61:b2:6a:54:09:58:18:a4:ac:
77:c3:62:91:87:ed:96:e8:cb:c5:e0:44:07:7b:3d:
0a:70:3c:24:09:af:75:52:5a:43:07:63:3c:f9:d7:
e4:44:1e:01:11:f6:e5:07:8a:c4:63:f5:fe:97:af:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:47:33:57:98:84:D4:A1:30:8B:49:A2:CC:A0:DE:0B:CB:F5:7A
X509v3 Authority Key Identifier:
keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:e8:c7:9d:5e:5d:01:2b:4d:12:4d:33:d8:2a:2e:d2:cd:
d5:c9:55:b6:e5:4b:06:28:b5:77:b6:a5:54:80:64:fe:c6:35:
11:1f:95:38:b7:09:96:06:2c:0c:81:85:9c:c3:c7:13:3c:49:
36:80:a3:10:c2:e2:b1:1b:04:aa:cb:8e:42:17:50:40:c0:90:
d3:9c:b5:68:14:a6:b5:28:37:f9:61:24:03:86:23:ed:ae:09:
ca:c9:49:68:cd:87:c9:98:0c:7e:87:dc:63:00:10:39:4b:19:
de:81:28:9b:56:42:f4:56:fb:33:20:ca:bb:e5:63:a9:c8:11:
86:44:ef:b1:f1:d3:04:70:4e:fe:3b:e2:54:be:36:a4:6c:a9:
81:3b:9c:d6:53:c6:49:2e:31:b0:f1:11:dd:f3:7b:39:a1:5f:
9f:3b:35:18:73:e9:dd:c9:cc:7d:bf:28:86:33:cc:97:75:b5:
82:54:35:f8:ff:0d:22:d4:c3:67:ba:35:0c:0b:2a:5d:58:04:
f1:eb:d4:2b:e6:06:65:0b:de:de:52:97:69:ce:30:66:5b:02:
f6:c9:6d:65:b2:32:76:b8:d3:7b:05:a9:40:ed:f7:92:35:57:
26:b6:9d:15:6a:28:6a:77:cc:5b:13:60:ed:8a:80:9a:d8:ad:
3d:e4:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:53 2025 by rpki-client